CVE-2018-8284
Summary
| CVE | CVE-2018-8284 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-07-11 00:29:00 UTC |
| Updated | 2022-05-23 17:29:00 UTC |
| Description | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2. |
Risk And Classification
Problem Types: CWE-94
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Microsoft | .net Framework | 2.0 | sp2 | All | All |
| Application | Microsoft | .net Framework | 3.0 | sp2 | All | All |
| Application | Microsoft | .net Framework | 3.5 | All | All | All |
| Application | Microsoft | .net Framework | 3.5.1 | All | All | All |
| Application | Microsoft | .net Framework | 4.5.2 | All | All | All |
| Application | Microsoft | .net Framework | 4.6 | All | All | All |
| Application | Microsoft | .net Framework | 4.6.1 | All | All | All |
| Application | Microsoft | .net Framework | 4.6.2 | All | All | All |
| Application | Microsoft | .net Framework | 4.7 | All | All | All |
| Application | Microsoft | .net Framework | 4.7.1 | All | All | All |
| Application | Microsoft | .net Framework | 4.7.2 | All | All | All |
| Application | Microsoft | .net Framework | 2.0 | sp2 | All | All |
| Application | Microsoft | .net Framework | 3.0 | sp2 | All | All |
| Application | Microsoft | .net Framework | 3.5 | All | All | All |
| Application | Microsoft | .net Framework | 3.5.1 | All | All | All |
| Application | Microsoft | .net Framework | 4.5.2 | All | All | All |
| Application | Microsoft | .net Framework | 4.6 | All | All | All |
| Application | Microsoft | .net Framework | 4.6.1 | All | All | All |
| Application | Microsoft | .net Framework | 4.6.2 | All | All | All |
| Application | Microsoft | .net Framework | 4.7 | All | All | All |
| Application | Microsoft | .net Framework | 4.7.1 | All | All | All |
| Application | Microsoft | .net Framework | 4.7.2 | All | All | All |
| Application | Microsoft | Project Server | 2010 | sp2 | All | All |
| Application | Microsoft | Project Server | 2013 | sp1 | All | All |
| Application | Microsoft | Project Server | 2010 | sp2 | All | All |
| Application | Microsoft | Project Server | 2013 | sp1 | All | All |
| Application | Microsoft | Sharepoint Enterprise Server | 2013 | sp1 | All | All |
| Application | Microsoft | Sharepoint Enterprise Server | 2016 | All | All | All |
| Application | Microsoft | Sharepoint Enterprise Server | 2013 | sp1 | All | All |
| Application | Microsoft | Sharepoint Enterprise Server | 2016 | All | All | All |
| Application | Microsoft | Sharepoint Foundation | 2010 | sp2 | All | All |
| Application | Microsoft | Sharepoint Foundation | 2013 | sp1 | All | All |
| Application | Microsoft | Sharepoint Foundation | 2010 | sp2 | All | All |
| Application | Microsoft | Sharepoint Foundation | 2013 | sp1 | All | All |
| Application | Microsoft | Sharepoint Server | 2010 | sp2 | All | All |
| Application | Microsoft | Sharepoint Server | 2013 | sp1 | All | All |
| Application | Microsoft | Sharepoint Server | 2010 | sp2 | All | All |
| Application | Microsoft | Sharepoint Server | 2013 | sp1 | All | All |
| Operating System | Microsoft | Windows 10 | - | All | All | All |
| Operating System | Microsoft | Windows 10 | 1607 | All | All | All |
| Operating System | Microsoft | Windows 10 | 1703 | All | All | All |
| Operating System | Microsoft | Windows 10 | 1709 | All | All | All |
| Operating System | Microsoft | Windows 10 | 1803 | All | All | All |
| Operating System | Microsoft | Windows 10 | - | All | All | All |
| Operating System | Microsoft | Windows 10 | 1607 | All | All | All |
| Operating System | Microsoft | Windows 10 | 1703 | All | All | All |
| Operating System | Microsoft | Windows 10 | 1709 | All | All | All |
| Operating System | Microsoft | Windows 10 | 1803 | All | All | All |
| Operating System | Microsoft | Windows 7 | - | sp1 | All | All |
| Operating System | Microsoft | Windows 7 | - | sp1 | All | All |
| Operating System | Microsoft | Windows 8.1 | All | All | All | All |
| Operating System | Microsoft | Windows 8.1 | All | All | All | All |
| Operating System | Microsoft | Windows Rt 8.1 | - | All | All | All |
| Operating System | Microsoft | Windows Rt 8.1 | - | All | All | All |
| Operating System | Microsoft | Windows Server | 1709 | All | All | All |
| Operating System | Microsoft | Windows Server | 1803 | All | All | All |
| Operating System | Microsoft | Windows Server | 1709 | All | All | All |
| Operating System | Microsoft | Windows Server | 1803 | All | All | All |
| Operating System | Microsoft | Windows Server 2008 | All | sp2 | All | All |
| Operating System | Microsoft | Windows Server 2008 | - | sp2 | All | All |
| Operating System | Microsoft | Windows Server 2008 | r2 | sp1 | All | All |
| Operating System | Microsoft | Windows Server 2008 | All | sp2 | All | All |
| Operating System | Microsoft | Windows Server 2008 | - | sp2 | All | All |
| Operating System | Microsoft | Windows Server 2008 | r2 | sp1 | All | All |
| Operating System | Microsoft | Windows Server 2012 | All | All | All | All |
| Operating System | Microsoft | Windows Server 2012 | r2 | All | All | All |
| Operating System | Microsoft | Windows Server 2012 | All | All | All | All |
| Operating System | Microsoft | Windows Server 2012 | r2 | All | All | All |
| Operating System | Microsoft | Windows Server 2016 | All | All | All | All |
| Operating System | Microsoft | Windows Server 2016 | - | All | All | All |
| Operating System | Microsoft | Windows Server 2016 | All | All | All | All |
| Operating System | Microsoft | Windows Server 2016 | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8284 | CONFIRM | portal.msrc.microsoft.com | Patch, Vendor Advisory |
| Microsoft .NET Multiple Flaws Let Remote Users Execute Arbitrary Code and Local Users Bypass Security and Gain Elevated Privileges - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| Microsoft .NET Framework CVE-2018-8284 Remote Code Execution Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.